pfSense

<?php

/*

	system_hasync.php

*/

 *	Copyright (c)  2004-2015  Electric Sheep Fencing, LLC. All rights reserved.

 *	Redistribution and use in source and binary forms, with or without modification,

 *	are permitted provided that the following conditions are met:

 *

 *	1. Redistributions of source code must retain the above copyright notice,

 *		this list of conditions and the following disclaimer.

 *

 *	2. Redistributions in binary form must reproduce the above copyright

 *		notice, this list of conditions and the following disclaimer in

 *		the documentation and/or other materials provided with the

 *		distribution.

 *

 *	3. All advertising materials mentioning features or use of this software

 *		must display the following acknowledgment:

 *		"This product includes software developed by the pfSense Project

 *		 for use in the pfSense software distribution. (http://www.pfsense.org/).

 *

 *	4. The names "pfSense" and "pfSense Project" must not be used to

 *		 endorse or promote products derived from this software without

 *		 prior written permission. For written permission, please contact

 *		 coreteam@pfsense.org.

 *

 *	5. Products derived from this software may not be called "pfSense"

 *		nor may "pfSense" appear in their names without prior written

 *		permission of the Electric Sheep Fencing, LLC.

 *

 *	6. Redistributions of any form whatsoever must retain the following

 *		acknowledgment:

 *

 *	"This product includes software developed by the pfSense Project

 *	for use in the pfSense software distribution (http://www.pfsense.org/).

 *

 *	THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

 *	EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 *	IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 *	PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 *	ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 *	SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 *	NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 *	LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 *	HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 *	STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 *	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 *	OF THE POSSIBILITY OF SUCH DAMAGE.

 *

 *	====================================================================

 *

 */

##|+PRIV

##|*IDENT=page-system-hasync

##|*NAME=System: High Availability Sync

##|*DESCR=Allow access to the 'System: High Availability Sync' page.

##|*MATCH=system_hasync.php*

##|-PRIV

require("guiconfig.inc");

$a_hasync = &$config['hasync'];

	'pfsyncenabled',

	'synchronizeusers',

	'synchronizeauthservers',

	'synchronizecerts',

	'synchronizerules',

	'synchronizeschedules',

	'synchronizealiases',

	'synchronizenat',

	'synchronizeipsec',

	'synchronizeopenvpn',

	'synchronizedhcpd',

	'synchronizewol',

	'synchronizestaticroutes',

	'synchronizelb',

	'synchronizevirtualip',

	'synchronizetrafficshaper',

	'synchronizetrafficshaperlimiter',

	'synchronizednsforwarder',

	'synchronizecaptiveportal');

if ($_POST) {

	$pconfig = $_POST;

	foreach ($checkbox_names as $name) {

		$a_hasync[$name] = $pconfig[$name] ? $pconfig[$name] : false;

	}

	$a_hasync['synchronizetoip'] = $pconfig['synchronizetoip'];

	if ($pconfig['passwordfld'] == $pconfig['passwordfld_confirm']) {

				$a_hasync['password'] = $pconfig['passwordfld'];

		}

		$input_errors[] = gettext("Password and confirmation must match.");

	}

		if (!is_ipaddrv4($pconfig['pfsyncpeerip'])) {

			$input_errors[] = gettext("pfsync Synchronize Peer IP must be an IPv4 IP.");

		}

	}

		write_config("Updated High Availability Sync configuration");

		interfaces_sync_setup();

		header("Location: system_hasync.php");

		exit();

	}

foreach ($checkbox_names as $name) {

	$pconfig[$name] = $a_hasync[$name];

}

$pconfig['synchronizetoip'] = $a_hasync['synchronizetoip'];

$pconfig['passwordfld']	 = $a_hasync['password'];

$ifaces = get_configured_interface_with_descr();

$ifaces["lo0"] = "loopback";

// Build a list of available interfaces

$iflist = array();

foreach ($ifaces as $ifname => $iface) {

	$iflist[$ifname] = $iface;

}

	print_input_errors($input_errors);

}

$section = new Form_Section('State Synchronization Settings (pfsync)');

$section->addInput(new Form_Checkbox(

	'pfsyncenabled',

	'Synchronize states',

	'pfsync transfers state insertion, update, and deletion messages between firewalls.',

	($pconfig['pfsyncenabled'] === 'on'),

	'on'

))->setHelp('Each firewall sends these messages out via multicast on a specified interface, using the PFSYNC protocol (IP Protocol 240).' .

			' It also listens on that interface for similar messages from other firewalls, and imports them into the local state table.<br />' .

			'This setting should be enabled on all members of a failover group.<br />' .

			'Clicking "Save" will force a configuration sync if it is enabled! (see Configuration Synchronization Settings below)');

$section->addInput(new Form_Select(

	'pfsyncinterface',

	$iflist

))->setHelp('If Synchronize States is enabled this interface will be used for communication.<br />' .

			'You must define an IP on each machine participating in this failover group.<br />' .

$section->addInput(new Form_Input(

	'pfsyncpeerip',

	'pfsync Synchronize Peer IP',

	'text',

	$pconfig['pfsyncpeerip'],

	['placeholder' => 'IP Address']

$form->add($section);

$section = new Form_Section('Configuration Synchronization Settings (XMLRPC Sync)');

$section->addInput(new Form_Input(

	'synchronizetoip',

	'Synchronize Config to IP',

	'text',

	$pconfig['synchronizetoip'],

	['placeholder' => 'IP Address']

))->setHelp('Enter the IP address of the firewall to which the selected configuration sections should be synchronized.<br /><br />' .

			'XMLRPC sync is currently only supported over connections using the same protocol and port as this system - make sure the remote system\'s port and protocol are set accordingly!<br />' .

			'Do not use the Synchronize Config to IP and password option on backup cluster members!');

$section->addInput(new Form_Input(

	'username',

	'Remote System Username',

	'text',

	$pconfig['username']

))->setHelp('Enter the webConfigurator username of the system entered above for synchronizing your configuration.<br />' .

			'Do not use the Synchronize Config to IP and username option on backup cluster members!');

	'Remote System Password',

	'password',

	$pconfig['passwordfld']

))->setHelp('Enter the webConfigurator password of the system entered above for synchronizing your configuration.<br />' .

			'Do not use the Synchronize Config to IP and password option on backup cluster members!');

$group->add(new Form_MultiCheckbox(

	'Synchronize Users and Groups',

	'on'

));

	'Synchronize Auth Servers',

	'on'

));

	'Synchronize Certificates',

	'on'

));

	'Synchronize Rules',

	'on'

));

	'Synchronize Firewall schedules',

	'on'

));

	'Firewall aliases ',

	($pconfig['synchronizealiases'] === 'on'),

));

	'Synchronize NAT',

	'on'

));

	'Synchronize IPsec',

	'on'

));

	'Synchronize OpenVPN',

	'on'

));

	'Synchronize DHCPD',

	'on'

));

	'on'

));

	'Synchronize Static Routes',

	'on'

));

	'Synchronize Load Balancer',

	'on'

));

	'Synchronize Virtual IPs',

	'on'

));

	'Synchronize traffic shaper (queues)',

	'on'

));

	'Synchronize traffic shaper (limiter)',

	'on'

));

	'on'

));

	'Synchronize Captive Portal)',

	'on'

));

print($form);